Security‑Focused Software Engineer 3 (Hybrid)

CJ; Agoura Hills (CA); Hybrid; USD 88,540 - 135,632; Full time

Benefits offered by this job

Flexible time off

Paid holidays

Team-building events

Employee referral program

Annual recognition awards

Hybrid work

Parental bonding leave

Backup care options

Employee discount program

International SOS program

Business Resource Groups

Job summary

CJ is seeking a Software Engineer 3 focused on security within Engineering Experience. The role is hybrid, requiring 3 days in CJ offices in the United States. You will guard CJ's code and infrastructure, turning findings into actionable fixes, and partner with GSO/auditors to ensure secure delivery across CJ's platforms.

You will read and fix real issues, not just file tickets, and contribute to CI/CD security integration, threat modeling, and secure-by-design practices.

Qualifications

• 3+ years of security-focused software or infrastructure engineering.
• Bachelor's degree or equivalent experience.
• Read code and infrastructure configuration, not just scanners.
• Understand common vulnerability classes and impact.
• Experience with AWS/Kubernetes and credible technical discussions.
• Ability to translate technical findings for non-security stakeholders.

Responsibilities

• Triage and respond to vulnerabilities identified through tools and tests.
• Analyze infrastructure and codebases to explain real risk and impact.
• Manage vulnerability queue end-to-end: intake, prioritization, tracking, fixes.
• Collaborate with engineers to articulate threat behind findings.
• Remediate findings directly when possible and drive fixes with teams.
• Integrate security checks into CI/CD pipelines (SAST/DAST).
• Contribute to security standards and coach teams on best practices.
• Validate AI-proposed fixes and risk assessments against runtime context.

Skills

Security engineering

DevSecOps

AWS

Kubernetes

Python

Go

Java

Education

Bachelor's degree or equivalent

Tools

Jira

CI/CD tooling

Terraform

GitLab CI/CD

Veracode

Wiz

Job description

CJ is seeking a Software Engineer 3 focused on security within Engineering Experience. The role is hybrid, requiring 3 days in CJ offices in the United States. You will guard CJ's code and infrastructure, turning findings into actionable fixes, and partner with GSO/auditors to ensure secure delivery across CJ's platforms.

You will read and fix real issues, not just file tickets, and contribute to CI/CD security integration, threat modeling, and secure-by-design practices.